$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a1aaefd-61d5-3a14-8107-420870134f29.roa File: 5a1aaefd-61d5-3a14-8107-420870134f29.roa (raw, json) Hash identifier: 5wHKUIcLK85WwNmP6nSmDfbk2xi0oxFAxQXbg7zL2dk= Subject key identifier: ED:9E:BE:D7:85:71:5A:C1:E2:DE:2D:50:FC:17:19:59:BF:3E:44:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324D45E5767FCC52A50E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a1aaefd-61d5-3a14-8107-420870134f29.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 36618 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4d:45:e5:76:7f:cc:52:a5:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=5eb75c12-3a47-4397-a21e-484b852ab41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:59:a5:00:f5:11:ad:9b:e4:a4:c1:11:62: db:6b:50:73:c6:e2:40:27:c8:d0:78:a6:0c:20:48: 86:a6:da:91:e9:1e:b5:3b:96:d6:5d:78:1f:8b:ab: 35:f2:61:d0:71:46:f5:22:3d:81:5b:69:ab:8a:ed: 70:32:5f:a4:26:7e:de:8a:bc:f8:b4:2b:bb:1c:15: bb:e2:72:99:b0:40:f2:0c:43:46:7d:9b:37:8a:37: bf:5b:9b:c1:d4:6c:01:66:d9:6f:5c:5c:dd:3e:e4: e7:d4:89:87:14:da:85:9b:53:8d:d5:49:70:e3:2c: 9b:18:00:87:79:e6:99:52:99:b0:57:41:f8:74:1f: a7:41:3c:79:e0:b2:72:dd:9b:5e:ec:22:c9:4d:85: 6a:83:de:30:ea:8b:af:5f:9f:17:ad:d5:b5:4b:f9: a2:7a:b6:16:f4:8f:5f:7e:fb:2c:68:df:52:d2:32: 38:7c:f6:76:69:aa:89:cc:25:1b:b7:ba:7e:f0:b3: a3:33:9a:b9:2f:47:83:a1:dd:18:53:d1:d3:86:8f: 91:92:c9:64:87:96:70:08:74:e9:70:21:3c:5b:7c: 30:cb:3a:42:30:c4:b9:ca:77:46:d5:82:93:dc:59: f5:a6:7a:35:25:7b:a1:d9:9d:f1:14:24:9e:56:b1: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:BE:D7:85:71:5A:C1:E2:DE:2D:50:FC:17:19:59:BF:3E:44:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a1aaefd-61d5-3a14-8107-420870134f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5f:9b:3f:4c:1b:87:d4:7a:ce:bc:df:5e:d2:03:a9:ed:8f: 60:20:de:fa:d3:27:df:d6:97:ec:b4:60:ee:cc:65:3e:19:62: 9b:ad:27:19:4d:a9:48:15:ec:15:1e:94:8c:52:65:ff:82:6a: 98:af:da:b5:0e:cc:7a:6d:de:cb:29:e1:ad:96:77:9e:73:37: a3:6a:59:9d:38:99:74:93:ab:cd:f8:5e:12:31:35:ab:aa:8c: 62:3e:98:bb:ad:c9:42:f4:a3:36:26:ec:b6:a1:81:76:0d:65: 42:fa:f4:15:8a:fb:ab:bf:94:b6:54:c8:0f:b5:5f:fb:12:5b: b7:28:0d:37:8d:d9:39:24:ba:31:46:19:c8:56:70:68:03:48: ce:7e:83:26:99:bb:06:34:37:a0:1c:56:e1:85:2b:86:68:11: 23:45:88:8a:3f:40:42:87:42:75:6d:f6:b9:df:bc:d3:b7:7f: 92:62:06:cc:f5:e5:3c:6a:c7:94:33:0f:bc:8b:d6:ea:b4:a5: 99:fa:92:61:db:45:80:a2:c4:08:cf:b1:3b:a8:49:18:28:52: 58:75:a6:17:e7:ad:d3:bf:fe:2b:1a:26:fb:11:ea:80:98:a2: 38:2e:58:d3:3f:4e:d0:50:da:1d:bb:c5:2a:94:18:37:56:59: 89:c9:f3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk1F5XZ/zFKlDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NWViNzVjMTItM2E0Ny00Mzk3LWEyMWUtNDg0Yjg1MmFiNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzhZpQD1Ea2b5KTBEWLba1BzxuJAJ8jQeKYM IEiGptqR6R61O5bWXXgfi6s18mHQcUb1Ij2BW2mriu1wMl+kJn7eirz4tCu7HBW7 4nKZsEDyDENGfZs3ije/W5vB1GwBZtlvXFzdPuTn1ImHFNqFm1ON1Ulw4yybGACH eeaZUpmwV0H4dB+nQTx54LJy3Zte7CLJTYVqg94w6ouvX58XrdW1S/mierYW9I9f fvssaN9S0jI4fPZ2aaqJzCUbt7p+8LOjM5q5L0eDod0YU9HTho+Rkslkh5ZwCHTp cCE8W3wwyzpCMMS5yndG1YKT3Fn1pno1JXuh2Z3xFCSeVrGTwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2evteFcVrB4t4tUPwXGVm/PkS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWExYWFlZmQtNjFkNS0z YTE0LTgxMDctNDIwODcwMTM0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNfmz9MG4fUes68317SA6ntj2Ag3vrTJ9/Wl+y0YO7MZT4ZYputJxlN qUgV7BUelIxSZf+Capiv2rUOzHpt3ssp4a2Wd55zN6NqWZ04mXSTq834XhIxNauq jGI+mLutyUL0ozYm7LahgXYNZUL69BWK+6u/lLZUyA+1X/sSW7coDTeN2TkkujFG GchWcGgDSM5+gyaZuwY0N6AcVuGFK4ZoESNFiIo/QEKHQnVt9rnfvNO3f5JiBsz1 5Txqx5QzD7yL1uq0pZn6kmHbRYCixAjPsTuoSRgoUlh1phfnrdO//isaJvsR6oCY ojguWNM/TtBQ2h27xSqUGDdWWYnJ83A= -----END CERTIFICATE-----Generated at Tue Sep 22 09:13:36 2026 by rpki-client